$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft File: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft (raw, json) Hash identifier: p8MRHXu0O00WBYSTVPjHNjhcbt70UrbOU/d9zDDUXxg= Subject key identifier: 1E:00:68:AD:C7:68:05:CF:31:D6:F8:8D:89:F7:3C:DA:92:95:44:69 Authority key identifier: B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A Certificate issuer: /CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Certificate serial: 69D61D96B2245BDBBA6B7FA858BA6BAAE5B37DA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:18:48 +0000 Manifest this update: Tue 12 May 2026 21:13:48 +0000 Manifest next update: Wed 13 May 2026 22:09:48 +0000 Files and hashes: 1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: fDnmzf65jBSv74PMDMyNjaHpX/nCsTXRpP2C1qWxmnk=) 2: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl (hash: fyyGSLE4AusBYD809EoNyjRD+x+QxPX6qNPSaAvWrj8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d6:1d:96:b2:24:5b:db:ba:6b:7f:a8:58:ba:6b:aa:e5:b3:7d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Validity Not Before: May 12 21:13:48 2026 GMT Not After : May 13 22:09:48 2026 GMT Subject: CN=1E0068ADC76805CF31D6F88D89F73CDA92954469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d6:60:ce:01:b8:c2:37:5a:38:bf:9b:2a:b2: 30:c1:fb:45:34:db:65:2f:32:30:d0:12:d2:20:93: ae:29:bf:72:f5:99:75:ef:b1:b5:45:03:2d:0b:9a: 64:97:d5:0c:29:d8:6f:07:63:cd:75:2c:f4:45:53: 3f:92:4e:d7:25:3e:8a:66:ad:73:06:27:5b:f3:47: 86:19:16:cd:76:bf:bd:6c:27:05:11:84:d2:8e:aa: a0:64:ea:6a:f6:b3:29:9b:f9:69:d7:58:fa:14:b5: 36:e2:00:7a:86:d7:39:54:ec:66:8d:78:90:a4:19: 5e:02:41:d4:e2:31:93:6d:51:ba:f9:2f:f5:89:13: 3b:50:07:be:3c:a9:89:a2:91:cf:1b:55:27:59:c0: ba:91:6c:b3:68:44:ab:c0:66:15:e1:23:a7:90:48: 6a:49:e7:69:5f:3b:3e:6a:b5:f2:e1:51:84:7e:f9: dd:0f:3e:43:6a:27:e5:17:49:07:54:81:45:79:f5: da:73:52:b8:65:4b:a1:67:9f:fe:3e:70:82:4f:74: 5f:ce:45:1f:af:93:2f:ff:a0:7c:2b:93:09:3a:d1: 5c:54:65:fe:52:1f:57:e8:51:98:77:08:c4:95:67: 55:7a:c1:4b:2e:0f:41:6b:60:f6:ea:97:ed:4d:6a: 66:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:00:68:AD:C7:68:05:CF:31:D6:F8:8D:89:F7:3C:DA:92:95:44:69 X509v3 Authority Key Identifier: keyid:B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:41:1a:f6:96:dc:1a:27:d7:46:39:01:57:21:10:fd:20:ce: 15:45:e5:b5:40:91:a9:ee:9c:f2:86:a4:6c:5d:c2:3a:ab:78: 4d:b5:23:4e:a7:b6:2d:07:ae:5e:f4:d1:4f:f7:15:f2:5d:9d: 42:33:9b:76:66:cf:4e:83:18:3e:cb:4c:15:db:93:de:bf:9a: 0d:91:32:4d:14:af:1b:4f:6e:f7:9a:7c:78:b3:9f:d6:6c:c0: ea:bd:63:62:a1:88:ee:61:bc:c9:c2:8f:96:89:ed:d2:84:e5: 70:d4:0a:70:2f:3c:8f:46:7f:d8:74:6a:69:4b:43:48:51:e7: 48:96:17:b9:93:5a:25:e0:9e:91:00:ba:8c:2f:3a:9e:ea:1c: a3:c4:dd:4e:05:27:c6:02:b4:7c:80:51:cb:3e:53:00:9d:03: 71:21:ca:cb:45:0e:1c:6b:b5:ed:2a:0f:25:82:e1:22:31:94: 6f:75:0e:d2:e9:1a:ba:7d:08:2a:22:d0:ee:19:27:f9:37:f7: a5:1f:5c:7e:35:ec:f3:00:1b:92:32:f4:a9:80:95:e4:74:a0: 7e:89:2f:a7:75:f6:4b:d5:c8:69:f7:69:ac:6b:e4:a7:81:32: 41:d7:43:5e:77:02:56:b6:e0:4e:38:73:45:fc:cb:86:08:27: 20:ce:7c:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadYdlrIkW9u6a3+oWLprquWzfaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFD NUZBRDI5QTAeFw0yNjA1MTIyMTEzNDhaFw0yNjA1MTMyMjA5NDhaMDMxMTAvBgNV BAMTKDFFMDA2OEFEQzc2ODA1Q0YzMUQ2Rjg4RDg5RjczQ0RBOTI5NTQ0NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP1mDOAbjCN1o4v5sqsjDB+0U0 22UvMjDQEtIgk64pv3L1mXXvsbVFAy0LmmSX1Qwp2G8HY811LPRFUz+STtclPopm rXMGJ1vzR4YZFs12v71sJwURhNKOqqBk6mr2symb+WnXWPoUtTbiAHqG1zlU7GaN eJCkGV4CQdTiMZNtUbr5L/WJEztQB748qYmikc8bVSdZwLqRbLNoRKvAZhXhI6eQ SGpJ52lfOz5qtfLhUYR++d0PPkNqJ+UXSQdUgUV59dpzUrhlS6Fnn/4+cIJPdF/O RR+vky//oHwrkwk60VxUZf5SH1foUZh3CMSVZ1V6wUsuD0FrYPbql+1NamaPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHgBorcdoBc8x1viNifc82pKVRGkwHwYDVR0j BBgwFoAUubimHY6lUgzyjo5cJFAXasX60powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MTc2MDgtMTZiOC00NDk3LTgxZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4 RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFDNUZBRDI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9COUI4QTYxRDhFQTU1MjBDRjI4RThFNUMyNDUwMTc2QUM1RkFE MjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3 NkFDNUZBRDI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApBGvaW3Bon10Y5AVchEP0gzhVF5bVAkanu nPKGpGxdwjqreE21I06nti0Hrl700U/3FfJdnUIzm3Zmz06DGD7LTBXbk96/mg2R Mk0UrxtPbveafHizn9ZswOq9Y2KhiO5hvMnCj5aJ7dKE5XDUCnAvPI9Gf9h0amlL Q0hR50iWF7mTWiXgnpEAuowvOp7qHKPE3U4FJ8YCtHyAUcs+UwCdA3EhystFDhxr te0qDyWC4SIxlG91DtLpGrp9CCoi0O4ZJ/k396UfXH417PMAG5Iy9KmAleR0oH6J L6d19kvVyGn3aaxr5KeBMkHXQ153Ala24E44c0X8y4YIJyDOfCQ= -----END CERTIFICATE-----Generated at Wed May 13 04:54:35 2026 by rpki-client